serve-static@1.4.4 vulnerabilities
Serve static files
-
latest version
1.15.0
-
latest non vulnerable version
-
first published
10 years ago
-
latest version published
2 years ago
-
licenses detected
- >=0
Direct Vulnerabilities
Known vulnerabilities in the serve-static package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.Vulnerability | Vulnerable Version |
---|---|
When using serve-static middleware version < 1.7.2 and it's configured to mount at the root, it creates an open redirect on the site. Source: Node Security Project How to fix Open Redirect?
|
<1.6.5
>=1.7.0 <1.7.2
|
When using serve-static middleware version < 1.7.2 and it's configured to mount at the root, it creates an open redirect on the site. Source: Node Security Project How to fix Open Redirect?
|
<1.6.5
>=1.7.0 <1.7.2
|